The Cisco FLSASR1-FWNAT-R is the Firewall/NAT Stateful Inter-Chassis Redundancy License designed specifically for the Cisco ASR 1000 series aggregation services routers. This perpetual Right-To-Use (RTU) license enables stateful redundancy between chassis for Firewall and Network Address Translation (NAT) services, ensuring high availability and minimal downtime in demanding enterprise and service provider environments.
Key Capabilities
ASR 1000 Series Platform Overview
Cisco ASR 1000 series routers feature a separated control and data plane architecture powered by innovative Cisco QuantumFlow processors. Services including security (firewall, encryption), QoS, NBAR, Flexible Packet Matching (FPM), broadband aggregation, and Cisco Unified Border Element (SP edition) are embedded, offering up to 10x performance improvement over previous midrange solutions.
Firewall and Security Features
The embedded high-speed firewall utilizes Zone-Based Policy Firewall, creating implicit barriers between interfaces in different zones. Explicit policies define stateful inspection (L4/L7/application) and session parameters per zone pair. Supports HTTP/DNS policies across Internet-DMZ boundaries, with NetFlow v9 for session state logging to network management applications.
Redundancy and High Availability
Applications
Enterprise: WAN edge with application availability via hierarchical QoS (232,000 queues), IPsec VPN aggregation (thousands of sites, 8000 tunnels), embedded firewall.
Service Provider: Hosted CPE with software redundancy, broadband L2TP LAC/LNS (64k users/sessions), L3VPN PE (4M IPv4/IPv6 routes, 8k VRFs), high-end route reflector (29M IPv4 routes), SBC (32k calls, 40 Gbps media).
Software Integration
Cisco IOS XE modular OS supports 6 technology packages per version: IP Base (no encryption), IP Base, Advanced IP Services, Advanced IP Services (no encryption), Advanced Enterprise Services, Advanced Enterprise Services (no encryption). Each includes 7 sub-packages: RPBase, RPControl, RPAccess (K9/non-K9), RPIOS, ESPBase, SIPSPA, SIPBase.
For ASR 1001/ASR 1002-X: Universal images (SASR1001U/NPEK9/UK9, SASR1002XU/NPEK9/UK9) plus tech packs (SLASR1-IPB/AIS/AES).
